Static task
static1
Behavioral task
behavioral1
Sample
78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0.exe
Resource
win10v2004-20240611-en
General
-
Target
78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0
-
Size
5.2MB
-
MD5
66dc9e21bf537455d7ee89bce383568d
-
SHA1
01929f11d2962bb519e7653d8a24ded16edf3516
-
SHA256
78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0
-
SHA512
70038e20ac333c713747747a88298ff9e2d11b097d049e76f473c602aef7d328906196c4fcc89cb0bdb848a30db3967ea7b1d8c49e548fb689d379eb250aa75c
-
SSDEEP
98304:OTdcOprdy/gKBXh+caSoUkZIdLw/hC93m7/wBX1kd9Us49Jj:Pt9PloNZwLl30wBg9d4/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0
Files
-
78531f799a3137c8a1e24b66760e8120e600dca09fc81348b7a9f88c974029b0.exe windows:4 windows x86 arch:x86
e1185355c6b7d396a5f17f65c731bac7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
SetLastError
GetProfileStringA
LoadLibraryA
CloseHandle
user32
wsprintfA
PeekMessageA
shlwapi
ord158
winmm
midiStreamOut
ws2_32
htons
rasapi32
RasHangUpA
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragFinish
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 587KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ